> Sure, but how does that make a DS2 record useful? It needs a resolver > that understands more than NS and DS. Why would you do that and > not also do DELEG?
A few arguments to keep DS2 separate from DELEG: - there are DNSSEC validators that are not recursing. For this reason it might be more clear to keep DNSSEC separate from delegation. - An operator may not be interested in DELEG for delegation purposes but may want to use DS2. It would be extra operational complexity if the operator would be forced to add a DELEG record just to be able to use DS2. - I assume we will get only one chance to introduce a range of parent types. We may want to err on the side of flexibility. _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
